Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: 706LZ97TksxZKc4x5BUHrd5xjVLSlMAkf0lSapBa8bs=
Subject key identifier: 7C:FD:DD:5F:E1:7F:1E:38:4D:CD:62:85:1A:BB:B9:27:9A:1E:A4:08
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 0195E0B4A7EBB97B871CCD8707748A23D65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 11AF
Signing time: Sat 29 Mar 2025 07:01:30 +0000
Manifest this update: Sat 29 Mar 2025 07:01:30 +0000
Manifest next update: Sun 30 Mar 2025 07:01:30 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: QZphoFqnaS7Gi6h8E+srSmwQQGKzJSZxoGi5+Ixf4a4=)
2: GpM90An4j0aWnAQVOPwoRVNatnk.roa (hash: MKIleZe0XP5Hk0DTuIZD6iDzaTxtrUWEQu34eF8ZBrE=)
3: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (hash: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:a7:eb:b9:7b:87:1c:cd:87:07:74:8a:23:d6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Mar 29 07:01:30 2025 GMT
Not After : Mar 30 07:01:30 2025 GMT
Subject: CN=7cfddd5fe17f1e384dcd62851abbb9279a1ea408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:43:db:5c:b6:96:90:e2:18:27:93:3f:2f:
d6:d1:65:2f:11:da:ae:ad:bb:c0:35:55:92:f9:16:
62:6d:e1:02:aa:4e:a0:83:63:ba:a0:fc:bb:fa:56:
85:30:de:78:79:c9:7e:ab:e1:57:de:9f:53:d4:df:
39:74:44:a4:d8:b2:7a:95:c4:f9:32:ba:fe:8c:6e:
2f:b9:cf:90:74:dc:aa:95:bd:57:6b:c4:68:73:c3:
a5:39:b8:95:81:5b:56:79:a5:09:7c:c4:f0:56:1d:
32:0f:72:25:c4:53:30:5e:ef:d4:22:50:6d:49:62:
7b:50:5d:05:2e:f0:3b:df:55:4d:5b:f5:77:4f:81:
e7:14:33:0f:3f:aa:bb:eb:c2:49:f6:ae:ae:f3:dd:
39:98:4b:51:2a:a7:c9:4a:7b:56:54:5c:4c:62:5f:
36:84:18:77:6f:ca:8a:13:94:7d:74:32:82:ce:e5:
f1:34:21:0a:3e:1b:ba:0d:86:f6:9c:e1:52:e0:b5:
b6:ed:4a:29:f5:66:99:78:94:a9:ad:f2:34:c6:1c:
55:83:86:be:12:83:c0:ba:e9:87:4e:8c:9c:94:8c:
fb:0c:6b:08:78:d2:8b:89:35:5e:c3:62:7a:b4:37:
80:5d:71:00:3c:4d:af:d9:e8:2e:1b:00:4a:e0:c4:
e4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FD:DD:5F:E1:7F:1E:38:4D:CD:62:85:1A:BB:B9:27:9A:1E:A4:08
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2e:26:97:27:18:c8:80:29:9c:fb:1c:b2:55:39:d2:37:34:
71:d8:3e:d1:07:cb:95:d9:2b:52:cd:f4:bd:7a:d0:ca:50:9c:
5b:17:d0:42:9d:46:13:fd:58:58:de:88:9d:51:13:cb:df:de:
c3:05:f3:5d:63:ab:f6:2e:5f:c6:3c:d7:31:fb:ad:9c:80:e5:
dc:c4:3b:1a:22:62:bf:ac:74:9f:45:fd:ed:6f:86:42:32:8e:
3c:24:38:cf:92:77:8a:ad:27:c3:9d:50:85:b2:38:28:08:e8:
25:34:ac:f2:72:0a:1f:1d:f6:c1:06:4c:63:28:27:09:d8:ca:
3d:b2:f7:42:5e:cc:9f:96:b9:c1:3d:9b:ed:28:ea:e5:92:f5:
5e:8a:10:7a:19:e4:5f:c8:25:3f:b5:48:08:07:fb:b0:d4:27:
e0:3e:6b:2f:77:7e:33:4d:b4:8a:34:52:70:37:3b:ee:a1:a6:
e7:c0:a1:bf:72:8b:1e:76:c8:ca:12:c7:ef:b6:69:f0:83:57:
f9:e0:85:5e:96:0e:cb:e3:e4:1d:37:02:27:fd:21:f4:a2:ea:
d5:32:39:ca:67:aa:32:98:14:e0:b7:81:52:0b:8a:ed:02:a0:
8c:a3:eb:9b:4b:fa:25:4a:f2:bf:d6:23:7a:31:c4:52:8c:8b:
19:0c:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:12:50 2025 by rpki-client